Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in 
the application. 
Listing of Claims: 

1-19. (Canceled) 

20. (Currently Amended) A process for creating and managing pairs of 
asymmetrical cryptographic keys and associated certificates, each pair of 
asymmetrical cryptographic keys being intended for a subject managed by a computer 
system, comprising: 

searching in storage means for at least one subject one or more attributes, the 
attributes specifying one or more subjects for which a pair of asymmetric keys and an 
associated certificate must be created; 

creatin g, based on the one or more attributes, at least one first individual 
creation and certification request for a pair of asymmetric keys for said subject; 

transmitting a key generation request corresponding to said first individual 
creation and certification request to a key generating center, which issues a pair of 
asymmetric keys in accordance with said key generation request; 

creating a public key for said subject, 

creating at least one second individual certification request for public key 
created for said subject; and 

transmitting a certification authority request corresponding to said second 
individual certification request to a certification authority and issuing a first certificate 
in accordance with said certification authority request. 

21 . (Currently Amended) A process according to claim 20, further 
comprising creating [[a]] the pair of keys for a given subject when said subject lacks 
[[a]] the pair of keys and [[a]] the corresponding first individual creation and 
certification request. 

22. (Original) A process according to claim 20, further comprising executing 
said process periodically. 
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23. (Previously Presented) A process according to claim 20, wherein the first 
individual creation and certification request and the second individual certification 
request is are created from corresponding multiple creation and certification requests 
stored in the storage means relative to a set of subjects belonging to a preset list or to 
a set of subjects defined by predetermined criteria, as well as to model pairs of keys 
and associated model certificates for the set in question. 

24. (Previously Presented) A process according to claim 21, wherein the first 
individual creation and certification request and the second individual certification 
request are created from corresponding multiple creation and certification requests 
stored in the storage means relative to a set of subjects belonging to a preset list or to 
a set of subjects defined by predetermined criteria, as well as to model pairs of keys 
and associated model certificates for the set in question. 

25. (Previously Presented) A process according to claim 22, wherein the first 
individual creation and certification request and the second individual certification 
request are created from corresponding multiple creation and certification requests 
stored in the storage means relative to a set of subjects belonging to a preset list or to 
a set of subjects defined by predetermined criteria, as well as to model pairs of keys 
and associated model certificates for the set in question. 

26. (Currently Amended) A process according to claim 23, further 
comprising searching in each of the multiple creation and certification requests of th e 
syst e m for all of the subjects in a condition such that a pair of keys must be created. 

27. (Currently Amended) A process according to claim 24, further 
comprising searching in each of the multiple creation and certification requests of th e 
syst e m for all of the subjects in a condition such that a pair of keys must be created. 

28. (Currently Amended) A process according to claim 25, further 
comprising searching in each of the multiple creation and certification requests of the 
syst e m for all of the subjects in a condition such that a pair of keys must be created. 
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29. (Currently Amended) A process for creating and managing certificates 
for pairs of asymmetrical cryptographic keys, each certificate being intended for a 
pair of asymmetrical cryptographic keys for a subject managed by a computer system, 
comprising: 

searching in storage means for at least one pair of asymmetric k e ys for a 
public k e y for which one or more attributes, the attributes associated with one or more 
subjects for which a certificate must be created; 

creatin g, based on the one or more attributes, at least one individual 
certification request for certifying the a public key; and 

transmitting a certification authority request corresponding to said individual 
certification request to a certification authority and issuing a first certificate in 
accordance with said certification authority request. 

30. (Currently Amended) A process according to claim 29, further 
comprising creating the certificate for a given subject when said subject lacks [[a]] the 
certificate and [[an]] the individual certification request. 

31 . (Previously Presented) A process according to claim 29, further 
comprising executing said process periodically. 

32. (Previously Presented) A process according to claim 30, further 
comprising executing said process periodically. 

33. (Currently Amended) A process according to claim 30, further 
comprising creating the certificate for a given subject when the certificate expires 
during this p e riod . 

34. (Currently Amended) A process according to claim 31, further 
comprising creating [[the]] a new certificate for a given subject when the first 
certificate expires. 

35. (Currently Amended) A process according to claim 32, further 
comprising creating a new certificate for a given subject when the first certificate 
expires during this period . 
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36. (Previously Presented) A process according to claim 29, further 
comprising creating each individual request from a corresponding multiple 
certification request recorded in the storage means relative to a set of pairs of keys for 
subjects belonging to a preset list or to a set of pairs of keys for subjects defined by 
predetermined criteria, as well as to associated model certificates for the set in 
question. 

37. (Previously Presented) A process according to claim 30, further 
comprising creating each individual request from a corresponding multiple 
certification request recorded in the storage means relative to a set of pairs of keys for 
subjects belonging to a preset list or to a set of pairs of keys for subjects defined by 
predetermined criteria, as well as to associated model certificates for the set in 
question. 

38. (Previously Presented) A process according to claim 31, further 
comprising creating each individual request from a corresponding multiple 
certification request recorded in the storage means relative to a set of pairs of keys for 
subjects belonging to a preset list or to a set of pairs of keys for subjects defined by 
predetermined criteria, as well as to associated model certificates for the set in 
question. 

39. (Previously Presented) A process according to claim 33, further 
comprising creating each individual request from a corresponding multiple 
certification request recorded in the storage means relative to a set of pairs of keys for 
subjects belonging to a preset list or to a set of pairs of keys for subjects defined by 
predetermined criteria, as well as to associated model certificates for the set in 
question. 

40. (Previously Presented) A process according to claim 36, further 
comprising searching in each of the multiple certification requests of the system for 
all of the subjects in a condition such that a certificate must be created. 
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41. (Previously Presented) A process according to claim 37, further 
comprising searching in each of the multiple certification requests of the system for 
all of the subjects in a condition such that a certificate must be created. 

42. (Previously Presented) A process according to claim 38, further 
comprising searching in each of the multiple certification requests of the system for 
all of the subjects in a condition such that a certificate must be created. 

43. (Previously Presented) A process according to claim 39, further 
comprising searching in each of the multiple certification requests of the system for 
all of the subjects in a condition such that a certificate must be created. 

44. (Currently Amended) A process according to claim 20, wherein each 
multiple request comprises an attribute relative to at least one execution date and in 
that said process consists of comprises including in the search only the multiple 
requests whose expiration date has arrived. 

45. (Currently Amended) A process according to claim 20, further 
comprising performing [[the]] encoding of one or more extensions in accordance with 
one or more given rules and [[of]] entering the encoded extension or extensions into 
the individual certification request during the creation of said individual certification 
request. 

46. (Currently Amended) A process according to claim 20, further 
comprising changing [[the]] a value of [[an]] the attribute contained in each of the 
individual first and second requests to indicate status of the process. 

47. (Currently Amended) A computer system for creating and managing 
pairs of asymmetrical cryptographic keys and certificates associated with the pairs of 
keys, the pairs of keys and the certificates being intended for subjects managed by 
said system, comprising: 

a key generating center for creating at least one pair of keys at the request of a 
local registration authority with which the key generating center communicates; 
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at least one certification authority to which the system has access for creating 
a certificate at the request of the local registration authority; and 

means for automatin g, based on one or more attributes associated with one or 
more subjects, the creation and/or certification of at least one pair of 
keys for each subject managed by the system. 

48. (Previously Presented) A computer system according to claim 47, further 
comprising: 

a central management service for creating, updating and consulting objects 
and subjects managed by said system; 

a local registration authority for handling the creation and/or the certification 
of keys intended for the objects and the subjects; 

a central security base containing the subjects and the objects managed by the 
system with which the local registration authority communicates; 

a key generating center for creating at least one pair of keys at the request of 
the local registration authority with which the key generating center communicates; 
and 

at least one certification authority to which the system has access for creating 
a certificate at the request of the local registration authority. 

49. (Previously Presented) A computer system according to claim 47, further 
comprising a wake up mechanism periodically waking up the local registration 
authority. 

50. (Previously Presented) A computer system according to claim 48, further 
comprising a wake up mechanism periodically waking up the local registration 
authority. 

51. (Currently Amended) A process for creating and managing symmetrical 
cryptographic keys, wherein a symmetrical cryptographic key can be used to both 
encode and decode data, and wherein each key is intended for a subject managed by a 
computer system comprising: 

searching in storage means for at l e ast on e subj e ct one or more attributes, the 
attributes specifying one or more subjects for which a symmetric key must be created; 
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creatin g, based on the one or more attributes, at least one individual request 
for creating a symmetric key for said subject; 

transmitting a key generating request corresponding to said individual creation 
request to a key generating center, and 

issuing by said key generating center a symmetric key in accordance with said 
transmitted key generating request. 

52. (Currently Amended) A computer system for creating symmetrical 
cryptographic keys, wherein a symmetrical cryptographic key can be used to both 
encode and decode data, and wherein said system manages subjects, characteriz e d in 
that it compris e s comprising: 

a key generating center for creating at least one pair of keys at the request of 
the local registration authority with which the key generating center communicates; 

at least one certification authority to which the system has access for creating 
a certificate at the request of the local registration authority; and 

means for automatin g, based on one or more attributes associated with one or 
more subjects, the creation of at least one key for each subject managed by the 
system. 

53. (Previously Presented) A process according to claim 20, further 
comprising creating a pair of keys for a given subject when a certificate issued in 
response to a certification authority request for a pair of keys for said subject intended 
for an identical use has been revoked and a new pair of keys has been requested. 

54. (Previously Presented) A process according to claim 29, further 
comprising creating a pair of keys for a given subject when a certificate issued in 
response to a certification authority request for a pair of keys for said subject intended 
for an identical use has been revoked and a new pair of keys has been requested. 

55. (New) The process of claim 20, further comprising periodically activating 
a local registration authority to perform the searching step. 

56. (New) The process of claim 55, wherein an activation period is 
modifiable. 
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